Article 10 Reasonable measures for the verification of the beneficial owner and the persons on whose behalf or for the benefit of whom a transaction or activity is being carried out


This is a draft act

This text has been parsed from the AMLA final report draft as published on 30 September 2026. While we run a suite of validations, the automated parsing can result in errors. Also, before it is finally adopted by the Commission, its wording, numbering and references may change, and entire articles might be removed or added.

Earlier drafts: AMLA consultation paper draft (9 February 2026)

Summary What does Article 10 of the RTS on customer due diligence say?

This article supports the broader customer due diligence framework by clarifying what types of sources obliged entities may draw upon when taking reasonable measures to verify beneficial ownership information.

Rather than imposing new obligations, it provides practical guidance on acceptable information sources, spanning both public registers and a range of third-party sources.

It is directly linked to Article 22(7), point (b), of Regulation (EU) 2024/1624, acting as a companion provision that gives substance to the "reasonable measures" standard set out there.

Important points:

  • Draw on public registers — such as business, residence, tax, passport, and property registers — to the extent they are accessible to you, when verifying beneficial ownership information.
  • Third-party sources are also acceptable, including reputable data service providers, credit agencies, credit or financial institutions, other obliged entities within your group, or certified documents from the legal entity naming the beneficial owner.
  • The article does not mandate a specific source; it sets out a non-exhaustive list of options available to obliged entities when fulfilling their verification obligations.

Springlex's summary of the article is a reading aid, not a substitute for the legal text.

  1. When obliged entities take reasonable measures pursuant to Article 22(7), point (b), of Regulation (EU) 2024/1624, the information from the customer or other reliable sources may include the following information:

    1. information from public registers, other than the central registers, or other reliable national systems, such as the business register, residence register, tax register, passport database and the property register, to the extent that these are accessible to obliged entities; or

    2. information from other sources, which may include third-party sources, such as:

      1. reputable data services providers, including credit agencies;

      2. credit institutions or financial institutions;

      3. obliged entities within the group;

      4. documents from the legal entity or the legal arrangement where the beneficial owner is named, and where the identity of the named person is certified by persons that are authorised for document certification purposes.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod